This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e382e302f32332d3234203d3e203538353339.roa
File:                     3138302e3138342e382e302f32332d3234203d3e203538353339.roa (raw, json)
Hash identifier:          4ZUyQcdgNcHw2NP0tlTPbFvP8VPLAtf6TdUXuAk+YTc=
Subject key identifier:   35:80:6D:5C:EF:68:93:A9:6E:DF:15:51:62:0A:59:13:B5:33:C6:45
Certificate issuer:       /CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
Certificate serial:       2BA79D51493B0F76FC3B3E1BF397C7969BAD985A
Authority key identifier: 30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e382e302f32332d3234203d3e203538353339.roa
Signing time:             Tue 20 Jan 2026 02:09:45 +0000
ROA not before:           Tue 20 Jan 2026 02:04:45 +0000
ROA not after:            Tue 19 Jan 2027 02:09:45 +0000
asID:                     58539
IP address blocks:        180.184.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a7:9d:51:49:3b:0f:76:fc:3b:3e:1b:f3:97:c7:96:9b:ad:98:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F
        Validity
            Not Before: Jan 20 02:04:45 2026 GMT
            Not After : Jan 19 02:09:45 2027 GMT
        Subject: CN=35806D5CEF6893A96EDF1551620A5913B533C645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:c8:56:79:91:8f:c0:fe:cc:87:f0:e9:dd:
                    12:1e:a9:66:a8:e9:c0:bf:18:8e:3b:8a:bb:6a:89:
                    e7:ac:f7:22:71:8e:5b:3b:16:3a:53:2b:fc:6f:e8:
                    72:91:f5:d5:60:59:99:d2:b4:73:d5:c0:2d:87:4e:
                    37:e4:ae:d5:37:72:d7:72:ef:34:82:e3:41:05:25:
                    22:a9:a8:15:15:52:02:c8:74:f1:15:2e:11:c9:48:
                    80:e8:d7:60:82:08:2a:c7:f3:f0:36:91:86:e8:72:
                    70:ea:4e:7f:41:75:e1:17:d3:35:98:8b:3b:f6:c8:
                    84:8c:45:06:53:50:7b:aa:47:85:9a:4c:e7:d0:99:
                    b2:68:65:e4:a5:84:3d:32:8d:d1:3c:1f:08:6d:03:
                    7f:c5:a5:59:40:89:a3:e6:1a:f2:1b:e0:ac:6f:b6:
                    0f:cb:0d:5e:15:d2:5a:72:f7:1f:5b:44:22:47:85:
                    ab:fd:48:b4:7d:6c:18:b1:f0:41:75:17:8d:5f:7d:
                    e4:23:d7:f1:37:44:a6:6a:ad:e4:43:64:0d:d1:e3:
                    fa:ff:d9:69:4d:85:2c:b7:48:60:3e:35:50:85:8a:
                    aa:88:24:e0:ae:1d:51:e3:7d:69:50:75:c5:45:33:
                    88:65:7e:20:9f:96:c9:3c:cb:b1:07:7f:92:5f:f6:
                    0a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:6D:5C:EF:68:93:A9:6E:DF:15:51:62:0A:59:13:B5:33:C6:45
            X509v3 Authority Key Identifier:
                keyid:30:77:46:53:B3:B7:BF:15:B3:8B:8B:BF:FD:73:A5:C2:D1:EE:F3:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30774653B3B7BF15B38B8BBFFD73A5C2D1EEF38F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345691650/0/3138302e3138342e382e302f32332d3234203d3e203538353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:0f:95:0a:50:6c:fd:ab:e0:28:37:e9:c6:71:f0:05:71:
         a7:bc:97:53:bb:2b:0c:ea:cd:41:51:7d:62:03:b1:0c:d2:a0:
         ed:36:da:2f:b2:6c:6c:ed:de:04:e7:b8:6b:04:68:f1:10:6e:
         89:0f:8b:62:7e:ae:0e:30:a4:a7:39:84:10:d4:11:45:b7:6c:
         2e:e9:8f:2b:75:97:cf:f0:ff:42:34:5d:b2:e0:0a:8f:47:58:
         3c:3f:62:d3:68:69:01:10:ae:af:38:3f:df:0e:b4:af:7e:c4:
         37:ab:70:db:4f:fc:f0:83:0f:c9:7f:bc:1c:14:26:9b:81:ef:
         a9:00:e4:5f:78:b0:32:5b:67:cb:07:38:ac:40:5c:d4:34:c5:
         00:53:00:11:85:28:50:a4:ff:8e:c4:83:bc:85:74:c7:e8:0e:
         bb:23:87:bf:73:3d:97:e6:e1:90:d3:f2:be:bc:e3:89:72:4b:
         19:73:c7:67:0e:4e:be:c2:4c:a8:a7:31:e5:19:f9:ba:90:05:
         f8:f6:c3:d4:b2:d8:86:d7:bc:65:e3:77:92:b4:ae:af:5e:37:
         02:2b:f9:a7:c6:26:18:ea:dd:4a:a5:94:bb:c4:11:c9:bf:15:
         be:08:91:37:ac:85:8a:10:49:3c:01:73:0f:75:e0:61:a2:a4:
         44:d2:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:01:55 2026 by rpki-client